Behavioral task
behavioral1
Sample
10129f5f61ba3eaabccbbeec39897902.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10129f5f61ba3eaabccbbeec39897902.exe
Resource
win10v2004-20231222-en
General
-
Target
10129f5f61ba3eaabccbbeec39897902
-
Size
768KB
-
MD5
10129f5f61ba3eaabccbbeec39897902
-
SHA1
e5272b704ee0e9413fac39b2967ee2aa3b56a72f
-
SHA256
e2a6d0c8ed7070dded950bd83b7980dcc39f8ea7c853fdb94134769da565286d
-
SHA512
47c20b9a79e686f0d2675c055c5a5c3cb64d749b7647bbeb7ccb7f222bdfdaa3919ff1fd1adfb110c487034c66d0e1c354018b70259a835f659fef74e619b9f9
-
SSDEEP
12288:6b7cfjaHdRUJb1NKVX2RmWW3abh5OyFnh/SQ+d+dErXN2hLNKcS+ooSS6:6bIfuPUJJNKVhih5Osh/Sdd+LJm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10129f5f61ba3eaabccbbeec39897902
Files
-
10129f5f61ba3eaabccbbeec39897902.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 746KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE